CVE-2024-3515

CVE-2024-3515 describes a use-after-free in the Dawn component of Google Chrome/Chromium prior to version 123.0.6312.122. The underlying issue can allow a remote attacker to potentially trigger heap corruption via a crafted HTML page, with the described impact of arbitrary code execution or simil...

CVE-2026-15108

CVE-2026-15108: In Google Chrome, an Integer overflow in the Extensions API prior to 150.0.7871.115 allows an attacker to trigger an out-of-bounds memory read by convincing a user to install a crafted extension. Affected product: Google Chrome (Extensions API). Root cause: integer overflow in the...

CVE-2018-17479

CVE-2018-17479 is a Chrome GPU use-after-free vulnerability caused by incorrect object lifetime handling in GPU code, potentially leading to heap corruption. It affects Google Chrome prior to 70.0.3538.110. Public references describe an in-the-wild risk and indicate remediation via updating to ve...

CVE-2021-37961

CVE-2021-37961 is a use-after-free vulnerability in Google Chrome/Chromium’s Tab Strip that could allow remote code execution via a crafted HTML page (heap corruption). Public references indicate this CVE is part of Chromium security fixes; Debian notes a fix in later Chromium versions (bullseye:...

CVE-2022-3199

CVE-2022-3199 concerns a Use-after-Free in Chrome/Chromium frames. The issue arises in Chrome prior to 105.0.5195.125, enabling a remote attacker to potentially trigger heap corruption via a crafted HTML page (high impact). Affected software is Chromium/Chrome's rendering frames subsystem; root c...

CVE-2022-4181

CVE-2022-4181 is a use-after-free in Google Chrome’s Forms component via Chromium. The concrete details show a heap-corruption vulnerability in Chrome/Chromium’s Forms handling, exploitable through a crafted HTML page and rated High severity. Affected product: Google Chrome (Chromium base); vulne...

CVE-2022-4452

CVE-2022-4452 affects Google Chrome’s crosvm component. Prior to 107.0.5304.62, insufficient data validation could enable a remote attacker to cause object corruption via a crafted HTML page. Impact is described as High (remote, no user privileges, high confidentiality/integrity/availability impa...

CVE-2023-0930

CVE-2023-0930 corresponds to a heap buffer overflow in Chrome/Chromium’s Video component, present in Google Chrome prior to 110.0.5481.177. The issue could allow a remote attacker to potentially exploit heap corruption via a crafted HTML page. The vulnerability is rated High severity with network...

CVE-2023-1812

Summary: CVE-2023-1812 affects Google Chrome/Chromium. Vulnerability: Out-of-bounds memory access in DOM Bindings, exploitable via a crafted HTML page, enabling remote attacker impact as described in Chrome/Chromium advisories. Affected versions: prior to 112.0.5615.49. Remediation: upgrade to 11...

CVE-2024-0223

CVE-2024-0223 describes a heap buffer overflow in ANGLE used by Google Chrome/Chromium, allowing potential remote code execution via a crafted HTML page. Affected component: ANGLE within Chromium-based browser code paths prior to version 120.0.6099.199. Impact per sources is high (C/H/I/A) with n...

CVE-2024-9369

CVE-2024-9369: Insufficient data validation in Mojo within Google Chrome (Chromium) allowed a remote attacker, who had compromised the renderer process, to perform an out-of-bounds memory write via a crafted HTML page. The issue is confirmed in Chrome/Chromium and has high impact. Public fix/upda...

CVE-2018-18338

CVE-2018-18338 affects Chromium/Google Chrome’s canvas renderer. Arch Linux ASA-201812-2 documents a heap-based buffer overflow in the Canva component before 71.0.3578.80, enabling arbitrary code execution on a remote attacker. The fix is to upgrade to Chromium 71.0.3578.80-1 (or newer).

CVE-2018-6057

CVE-2018-6057 affects Google Chrome/Chromium prior to 65.0.3325.146, due to improper permissions handling of shared memory (ashmem). The issue permitted a renderer-compromised page to bypass inter-process read-only guarantees. Public documents confirm the vulnerability and list Chrome/Chromium 65...

CVE-2021-30580

The CVE-2021-30580 entry refers to a vulnerability in Chromium-based Google Chrome on Android, caused by Insufficient policy enforcement in Android intents. The issue allowed an attacker who could persuade a user to install a malicious application to exfiltrate potentially sensitive data via a cr...

CVE-2021-30629

CVE-2021-30629 is a concrete vulnerability in Chromium/Chrome: a use-after-free in the Permissions component of the Chromium browser engine before 93.0.4577.82. The issue could allow a remote attacker who compromises the renderer process to potentially trigger heap corruption via a crafted HTML p...

CVE-2021-37957

The CVE-2021-37957 entry concerns a Use-after-Free in WebGPU in Google Chrome before 94.0.4606.54, allowing a remote attacker to potentially trigger heap corruption via a crafted HTML page. Affected component: Chrome/WebGPU. Root cause: use-after-free in WebGPU code paths leading to heap corrupti...

CVE-2022-1872

CVE-2022-1872 concerns Google Chrome’s Extensions API, where insufficient policy enforcement allowed a user-assisted attacker to bypass downloads policy via a crafted HTML page and a malicious extension. The issue affects Chrome/Chromium prior to version 102.0.5005.61, with fixes released in the ...

CVE-2022-3041

CVE-2022-3041: Use-after-free in WebSQL of Google Chrome before 105.0.5195.52 allows remote attacker to potentially cause heap corruption via a crafted HTML page. Impacts include high severity across confidentiality, integrity, and availability. Affected software is Google Chrome (WebSQL). Remedi...

CVE-2022-3200

The CVE-2022-3200 entry corresponds to a Heap buffer overflow in Chrome/Chromium internals prior to 105.0.5195.125, enabling remote heap corruption via a crafted HTML page. Affected software shown in connected sources includes Chromium/Chrome updates (e.g., Chromium 105.0.5195.125). Root cause: h...

CVE-2023-0128

CVE-2023-0128 is a use-after-free in Chrome OS Overview Mode for Google Chrome prior to 109.0.5414.74, enabling heap corruption via a crafted HTML page when a user is prompted by specific UI interactions. The vulnerability affects Chrome OS/Chrome Desktop builds and was publicly addressed in the ...

CVE-2023-4364

CVE-2023-4364 describes an insecure implementation in Chrome’s Permission Prompts prior to 116.0.5845.96, allowing a crafted HTML page to obfuscate security UI. The issue affects Google Chrome (Chromium) and stems from an inappropriate implementation in Permission Prompts, with a Medium severity ...

CVE-2024-0812

CVE-2024-0812 is an issue in Google Chrome/Chromium prior to 121.0.6167.85, described as an inappropriate implementation in Accessibility that could allow remote object corruption via a crafted HTML page (severity High). The Connected documents corroborate that Chromium/Chrome updates addressing ...

CVE-2026-14012

This CVE describes a side-channel information leakage in CSS within Google Chrome (Chromium) prior to version 150.0.7871.47. The vulnerability allows a remote attacker to exfiltrate potentially sensitive data from process memory via a crafted HTML page. The affected component is the CSS handling ...

CVE-2021-30628

CVE-2021-30628 affects ANGLE in Google Chrome, with a stack buffer overflow leading to potential stack corruption via a crafted HTML page prior to Chrome 93.0.4577.82. The vulnerability is triggered remotely over the network and can impact partial confidentiality, integrity, and availability as d...

CVE-2021-37958

CVE-2021-37958 affects Google Chrome/Chromium: Inappropriate implementation in Navigation on Windows before 94.0.4606.54 allows a remote attacker to inject scripts/HTML into a privileged page via a crafted HTML page. Connected sources reference Chrome/Chromium updates addressing this issue (e.g.,...

CVE-2021-37982

CVE-2021-37982 is a use-after-free in the Incognito component of the Chromium browser engine before version 95.0.4638.54. The issue could allow an attacker to trigger arbitrary code execution via crafted HTML content; affected products cite Chromium-based browsers (e.g., Google Chrome/Chromium) b...

CVE-2021-38012

CVE-2021-38012 : Type confusion in the V8 component of the Chromium-based engine (Chrome before 96.0.4664.45) allows a remote attacker to potentially exploit heap corruption via crafted HTML, enabling arbitrary code execution or browser instability. Connected advisories (Arch/DEBIAN/Vivaldi/Opera...

CVE-2022-0453

CVE-2022-0453 describes a use-after-free in Chrome/Chromium’s Reader Mode prior to 98.0.4758.80, allowing a remote attacker who already compromised the renderer process to potentially trigger heap corruption with a crafted HTML page. The vulnerability affects Chrome/Chromium’s rendering component...

CVE-2022-0466

CVE-2022-0466 involves Google Chrome’s Extensions Platform, with an Inappropriate implementation in Chrome’s Extensions Platform prior to 98.0.4758.80. An attacker convincing a user to install a malicious extension could trigger a sandbox escape via a crafted HTML page. Affects Chrome desktop rel...

CVE-2022-3887

Use-after-free in Web Workers in Google Chrome prior to 107.0.5304.106 (CVE-2022-3887) allows remote heap corruption via crafted HTML. Affected: Google Chrome/Web Workers. Root cause: use-after-free in Web Workers (Chromium). Impact: High severity per Chrome/NVD. Remediation: Chrome Stable channe...

CVE-2022-4437

CVE-2022-4437 describes a heap corruption risk from a use-after-free in Mojo IPC in Google Chrome/Chromium before 108.0.5359.124. A remote attacker could exploit this via a crafted HTML page, leading to potentially arbitrary code execution or crash. The issue is listed as High severity. Public de...

CVE-2023-0703

CVE-2023-0703 is a Type Confusion vulnerability in Chrome/Chromium DevTools. A remote attacker could trigger heap corruption via UI interactions, requiring user participation, in Chrome versions prior to 110.0.5481.77. The issue is fixed in the Chrome 110 security release (and related Debian secu...

CVE-2023-1821

CVE-2023-1821: A low-severity vulnerability in Google Chrome’s WebShare (Chromium) stems from an improper WebShare implementation, potentially allowing a remote attacker to hide the Omnibox (URL bar) contents via a crafted HTML page. Affected products are Google Chrome/Chromium-based browsers pri...

CVE-2023-2461

CVE-2023-2461 affects Google Chrome/Chromium OS Inputs on ChromeOS before 113.0.5672.63. Root cause: use-after-free in OS Inputs leading to heap corruption via crafted UI interaction after user engagement. Impact per sources: remote attacker could exploit via user interaction; CVSS v3.1 indicates...

CVE-2023-4356

CVE-2023-4356 describes a use-after-free in Audio for Google Chrome prior to 116.0.5845.96, enabling a remote attacker who induces user UI interaction to potentially trigger heap corruption via a crafted HTML page. Public advisories (Debian, FreeBSD, Gentoo, Fedora, etc.) align on affected produc...

CVE-2024-4559

CVE-2024-4559 is a heap buffer overflow in WebAudio used by Google Chrome before version 124.0.6367.155. Multiple connected sources (Debian DSA-5683-1, CNVD-2024-36094, GLSA entries, Astra Linux security bulletin) corroborate this vulnerability in Chromium-based Chrome/WebAudio. Impact is describ...

CVE-2025-0996

Summary (CVE-2025-0996) : An insecure/incorrect implementation in the Chrome Android browser UI allowed a remote attacker to spoof the Omnibox (URL bar) via a crafted HTML page. The issue affects Chrome on Android prior to version 133.0.6943.98. The root cause is an inappropriate UI implementatio...

CVE-2018-16071

CVE-2018-16071 is a use-after-free in WebRTC processing (VP9) within Google Chrome’s WebRTC stack. The vulnerability arises when an untrusted index extracted from an RTP packet is used as the upper bound for vector erase, potentially dereferencing memory beyond the allocated range and causing hea...

CVE-2018-16076

CVE-2018-16076 affects the PDFium component used by Google Chrome/Chromium. The issue is a missing bounds check in PDFium that enables a remote attacker to trigger an out-of-bounds memory read through a crafted PDF file. Debian notes a fix in chromium-browser 69.0.3497.81 (and related updates), i...

CVE-2018-18359

CVE-2018-18359 affects chromium-browser/chromium before 71.0.3578.80. According to the Arch Linux ASA-201812-2 and Debian/Debian tracker entries, it is an information-disclosure vulnerability caused by an out-of-bounds read in the V8 JavaScript engine. Impact is that a remote attacker could acces...

CVE-2018-6073

CVE-2018-6073 is a WebGL heap-buffer overflow in Google Chrome before 65.0.3325.146 that allowed a remote attacker to perform an out-of-bounds memory write via a crafted HTML page. The vulnerability is tied to the WebGL implementation in Chrome’s rendering stack. Debian security advisories list t...

CVE-2021-37959

CVE-2021-37959 affects Google Chrome Task Manager: use-after-free leading to heap corruption when a user is convinced to perform a sequence of gestures on a crafted HTML page. Documented in multiple advisories (e.g., Debian DSA-5046-1) as a Chromium/Chrome vulnerability with impact to code execut...

CVE-2021-4058

CVE-2021-4058 describes a heap buffer overflow in ANGLE used by Google Chrome, prior to version 96.0.4664.93, which could allow a remote attacker to exploit heap corruption via a crafted HTML page. The vulnerability affects Chrome’s ANGLE/WebGL/graphics handling path and has a high CVSS3.1 base s...

CVE-2022-0462

CVE-2022-0462 involves Google Chrome (Chromium-based) where an inappropriate implementation in Scroll could allow a remote attacker to leak cross-origin data via a crafted HTML page, affecting versions prior to 98.0.4758.80. The issue was addressed in Chrome 98.0.4758.80/98.0.4758.81/98.0.4758.82...

CVE-2022-0468

CVE-2022-0468 affects Google Chrome (Chromium-based) Payments: Use-after-free in Payments leading to potential heap corruption via a crafted HTML page. Root cause: improper memory handling in Payments. Impact: remote attacker could exploit heap corruption; CVE entry has a high-risk profile (Chrom...

CVE-2022-1876

CVE-2022-1876 refers to a heap buffer overflow in Chrome DevTools prior to 102.0.5005.61. The issue could be triggered when a user is convinced to install a malicious extension and visits a crafted HTML page, potentially allowing heap corruption. Affected component: Chrome’s DevTools. Root cause:...

CVE-2023-1820

CVE-2023-1820 describes a heap buffer overflow in Google Chrome's Browser History (Chromium) before 112.0.5615.49. The issue allows a remote attacker to potentially corrupt the heap via a crafted HTML page when the user performs specific UI interactions. Affected product: Google Chrome/Chromium (...

CVE-2023-1823

CVE-2023-1823 concerns Google Chrome's FedCM: an improper FedCM implementation allows a remote attacker to bypass navigation restrictions via a crafted HTML page. Affected product/component: Chrome/Chromium FedCM integration. Root cause: Inappropriate implementation in FedCM. Impact: navigation r...

CVE-2024-2629

CVE-2024-2629 affects Google Chrome for iOS (Chromium-based UI) with an incorrect security UI that allows UI spoofing via a crafted HTML page. Root cause: insecure UI handling in Chrome prior to 123.0.6312.58. Impact: UI spoofing; no explicit exploit details provided in the sources. Remediation: ...

CVE-2018-17468

CVE-2018-17468 affects Chromium/Google Chrome Blink prior to 70.0.3538.67. The issue is an information-disclosure in Blink during navigation caused by incorrect handling of timer information, allowing a remote attacker to obtain cross-origin URLs. Affected components: Blink in Chromium/Chrome bef...